菜单
Run an adversarial code review against the current branch diff for the DayOne CLI Rust codebase. Use when asked to run a review, check code before pushing, or trigger a manual pre-PR review. Runs logic, security, architecture-taste, and test-adversary passes based on risk level.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/Automattic/DayOne-Cli --skill adversarial-review命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
| name | adversarial-review |
| description | Run an adversarial code review against the current branch diff for the DayOne CLI Rust codebase. Use when asked to run a review, check code before pushing, or trigger a manual pre-PR review. Runs logic, security, architecture-taste, and test-adversary passes based on risk level. |
Runs 1–4 adversarial review passes against the current branch diff. Risk level is derived from which files changed. Blocks pushes when P1 issues are found. P2/P3 findings are advisory.
This version is adapted for dayone-cli: Rust, clap-style CLI ergonomics, JSON-first output, SQLite/local-first persistence, outbox sync, keychain/SQLite encryption-key storage, and Day One API contract compatibility.
| Pass | Focus |
|---|---|
logic-redteam | Bugs, silent failures, data integrity, sync/conflict mistakes |
security | command/SQL injection, auth violations, key/PII leakage, crypto misuse |
architecture-taste | CLI layering, API/store boundaries, Rust taste, debt ratchets |
test-adversary | Test quality, false positives, overmocking, missing coverage |
| Level | Passes run |
|---|---|
| critical | logic-redteam + security + architecture-taste + test-adversary |
| high | logic-redteam + security + architecture-taste + test-adversary |
| medium | logic-redteam + architecture-taste + test-adversary |
| low | architecture-taste only |
The hook script scripts/adversarial-review.sh uses set -euo pipefail and trap '' PIPE immediately after so truncated diffs (echo … | head) do not fail with echo: write error: Broken pipe in GitHub Actions or macOS shells. Do not remove that trap without an alternative.
Scripts should remain compatible with macOS default Bash 3.2.
To run a review on the current branch without pushing, run from the repo root:
bash .agents/skills/adversarial-review/scripts/run.sh
Requires claude CLI and jq to be installed and authenticated, unless ADVERSARIAL_REVIEW_MODEL_COMMAND is set.
Findings are written to stderr in [P1|P2|P3] file:line format. P1 blocks the push. P2/P3 are advisory — review and address before merge.